Claire's, Icing & Intersport Hacked: Hacking groups engaged in web skimming attacks, also known as Magecart, have breached the online stores of three of the world's largest retail chains – sportswear retailer Intersport and accessories stores Claire's and Icing. According to reports published by security firms Sanguine Security and ESET, hackers compromised Intersport's official online shopping website, as well as Claire's and Icing's respective websites, and hid malicious code that records payment card details entered on purchase invoices.
Intersport Hacked
The “Intersport hacked” incident was reported by antivirus vendor ESET, affecting the online shopping website of Intersport, one of the largest sports retail chains in Europe, with over 5,800 stores across the continent. The skimmer was not loaded on all versions of Intersport’s website, but only on local versions serving customers in Croatia, Serbia, Slovenia, Montenegro and Bosnia and Herzegovina. While ESET said Intersport responded and removed the malicious code from its website within hours of being notified of the incident, ESET did not share the timeline of the attack, i.e. the dates between which the stores were compromised.
Claire's & Icing Hacked
A similar incident occurred, according to Willem de Groot of Sanguine Security, on Claire's website, which was attacked between April 25 and 30. The same thing happened with Icing. De Groot said he contacted Claire's management at the time of the attack and that the company removed the malicious code from its website. Claire's and Icing users who made online purchases during the aforementioned period are advised to monitor their card notifications for unauthorized transactions, lock their cards and cooperate with their banks, in case they detect any suspicious activity.
In all cases, the number of users affected is estimated to be higher than usual. Both the Claire's and Icing incidents and the Intersport incident took place during the COVID-19 when most physical stores were closed and companies redirected users to sites for online product purchases.
